- Case Manager Release Notes
- Get Started with Case Manager
- Configure Case Manager Settings
- Investigate a Security Incident
- Manually Create an Incident
- Edit an Incident
- Delete an Incident
- Manually Add an Entity
- Manually Add an Artifact
- Delete an Entity or Artifact
- Add Advanced Analytics Evidence to a Case Manager Incident
- Manage Tasks During an Investigation
- Send Messages from an Incident
- Filter Incidents
- Search for an Incident
- Sort Incidents
- Export Incidents
The Workbench
View all Incident Responder actions and playbooks you've run on a Case Manager incident and their outputs, and run more actions and playbooks at an incident's workbench.
To navigate to an incident's workbench, navigate to CASE MANAGER, select an incident to view its details, then click the View Workbench button.
View all Incident Responder actions and playbooks you ran on the incident and what the outputs are. The number on each action or playbook indicates how many input parameters it processed. To view the output for an input, select the menu.
To manually run a single action or playbook, select RUN ACTION or RUN PLAYBOOK. If you have a Fusion license, you can only run turnkey playbooks and out-of-the-box actions. To create and run custom playbooks and actions, you must have an Incident Responder add-on. To learn more, contact your Exabeam account representative or open a case on the Exabeam Community.
To clear the playbook and action results, select RESET CARDS.